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Abstract 

We study cryptography based on operator theory, and propose quantum no- 
key (QNK) protocols from the perspective of operator theory, then present 
a framework of QNK protocols. The framework is expressed in two forms: 
trace-preserving quantum operators and natural presentations. Then we de- 
fined the information-theoretical security of QNK protocols and the security 
of identification keys. Two kinds of QNK protocols are also proposed. The 
first scheme is constructed based on unitary transformation, and the other 
is constructed based on two multiplicative commutative sets. 
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1. Introduction 

The earliest group of quantum message oriented protocols is suggested 
in [H, Q, 0|, which can be regarded as a quantum version of one-time pad, 
the sender and the receiver must preshare secretly a classical key. Later, a 
public-key encryption scheme of quantum message is proposed [1] . Recently, 
this kind of public- key cryptosystems has been developed 

Here we consider another technique to securely transmit quantum mes- 
sage, so called quantum no-key (QNK) protocol. No-key protocol was first 
proposed by Shamir . It is a wonderful idea to transmit classical messages 
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secretly in public channel, independent of the idea of public-key cryptosys- 
tem and that of secret-key cryptosystem. However, the protocol presented 
is computationally secure, cannot resists a man-in-the-middle(MIM) attack. 
0, Isj develop a quantum from of no-key protocol based on single-photon 
rotations, which can be used to transmit classical and quantum messages 
secretly. It can be seen that the security of the QNK protocol is based on 
the laws of quantum mechanics, so it is beyond computational hypothesis. 
Ref. jof proposed a protocol based on quantum computing of Boolean func- 
tions. This protocols is constructed with inherent identifications in order 
to prevent MIM attack. Similar to the idea of QNK protocol, Kanamori 
et al.O proposed a protocol for secure data communication, Kye et al.|12l 



proposed a quantum key distribution scheme, and Kak [l3| proposed a three- 
stage quantum cryptographic protocol for key agreement. Wu and Yang [14 
presents a practical QNK protocol, and studied a new kind of attack named 
unbalance-of-information-source (UIS) attack. This kind of attack may also 
be effective to quantum secure direct communication protocols, such as those 
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In the paper, the theory of QNK protocols is studied, and a framework 
of QNK protocols is presented. Then we defined the information-theoretical 
security of QNK protocols, and the security of identification keys. Finally, 
two kinds of QNK protocols are presented. 



2. Quantum no-key protocols 

2.1. Framework 

Let us consider a general framework of quantum no-key protocol, in which 
two ancillary states are used. Suppose Alice will send quantum message p e 
Hm- The ancillary states used by Alice and Bob are pA and pb, respectively. 
The framework of QNK protocol is described as (see Figure [1]): 

1. Alice randomly prepare a quantum state pa, then performs Ua on the 
quantum states pa® p and gets Ua{pa ® pW'a- Then she sends to Bob 
the first cipher state pi, 

pi = trA{UA{pA ® p)U\) = £a{p)- 
She retains the state = trM{UA{pA ® p)Ua). 
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Figure 1: A general framework of quantum no key protocol. This figure is divided into 
two part by a dashed line. The part above the dashed line describes Alice's operations, 
and the other part describes Bob's operations. The quantum state p is the plain state, and 
PijP2,P3 represents the three cipher states transmitted between Alice and Bob. pA,pB 
are two ancillary states generated randomly by Alice and Bob, respectively. 



2. Bob randomly prepares a quantum state ps, then performs Ub on the 
quantum states pi® Pb and gets Ub{pi ® PbWb- Then he sends to 
Ahce the second cipher state p2, 

P2 = trB{UB{pi ® Pb)Ub) = Sb{pi)- 

He retains the state = trMiUsipi <E) Pb)Ub)- 

3. Ahce performs on p'^ ® p2, and sends to Bob the third cipher state 

p^ = tr,^{U'Ap'A®P2)U'l)^£'A{p2). 

4. Bob performs U'^ on pa ® p^, and gets the message p/, 

P' = e^V = tTBiKipz ® p'bM) = SM- 

In the above protocols, the four quantum operations Eai^Bi^'ai^'b 
all trace-preserving quantum operators. This protocol is correct if and only 
if the four quantum operators satisfy this condition: 

£'bo£'j^o£bo£a^ e"^X. (1) 

Remark: As a special case, the unitary transformations Ua,Ub can 
be chosen as bitwise controlled-unitary transformations where the message 
qubits act as control qubits, and U'j^ = U\,U'^ = t/^. In this case, (J ® 
Ub){Ua®I) = {Ua®I){I®Ub), and {I ®U'j,){U'a® ®Ub){Ua® I) = L 
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2.2. Natural Representation 

Trace-preserving quantum operator S can be written as the form of operator- 
sum representation 

S{p) = J2E^pEl (2) 

i 

Its natural representation [l9| is 

tip) = J2iE.®E:)f^B^, (3) 

i 

where is a the column vector, and represents the vector form of the density 
matrix p. 

The quantum operations £i and £2 are trace-preserving quantum op- 
erator, and their natural representations are denoted as A, B respectively. 
Because trace-preserving quantum operator can be realized physically, the 
operators ^4, B can be realized physically. 

Suppose four operators ^4, B, A', B' represent the natural representation of 
the four trace-preserving quantum operators £a,£b^£'a^£'b- Next we deduce 
the expressions of the natural representation A, B, A' , B'. Let the ancillary 
states of Alice and Bob are pA = Pb = |0)(0|, the orthogonal basis on the 
ancillary space is the set {ek}k- From the trace-preserving quantum operator 
^a{p) = ^'^a(^a(|0)(0| (g) p)U\), it can be inferred that 

£a{p) = 5^(efc|[/A(|0)(0|®p)f/i|efc) 

k 
k 

where Ek = {ek\UA\0) is an operator acting on the message space Hm- 
Thus, according to Eq.(|3]), one know that the natural representation of trace- 
preserving quantum operator £a is as follows 

A = Y,Ek®El = Y,{ek\UA\0) ® {ek\UX\0). 

k k 

Similarly, one can present the natural representations of the other three trace- 
preserving quantum operators, for example B = J2k(^k\UB\0) ® {ek\U^\0). 
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Prom the above analysis, the four transformations to the quantum mes- 
sage p in the quantum no-key protocol can be described in the form of natural 
representation. 



Quantum no-key protocol can be described in the form of trace-preserving 
quantum operators or natural representation, and the two forms are equiv- 
alent. In the following sections, we use the natural representation, and the 
operators A and B are both natural representations of trace-preserving quan- 
tum operators. £i o £2 = ^2 o if and only if AB — BA. 
The additive commutator A, B satisfy 



or be written as B-^A'^BA = e'^I, 

When X = A = 0, the additive commutator equals to multiplicative 
commutator. The multiplicative commutator BA = e^^AB is just additive 
commutator when A = 0; Multiplicative commutator is different from addi- 
tive commutator in only a global phase e'^ when A 7^ 0, and they have no 
difference in physical implementation. 

Theorem 1: The multiplicative commutators A, B are unitary matrices. 
If BA = e''^AB, where A 7^ 0, then the sum of the eigenvalues of the operators 
A, B are zero, respectively. 

Proof It means to prove: ii A = e'"^^\aj){aj\, then 6**^^ = 0; if 
B — J2j e"^^ \bj){bj\, then ^^'^^ — 0- The proof is as follows. 

Prom BA — e^^^'^AB where A, B are both unitary, one know that A — 
e^'^^^ B^ AB . Because A is a unitary transformation, it has spectral decompo- 
sition A = J2j and each eigenvalue Xj can be written as e^'^K Thus, 



Ejm{j\ = Eje"^-^XjB^j){j\B. Then 

A, = J]e^^-A,(A;|Bt|i)(j|5|fc) = J] e'<^-A,|(i|S|/c)r. (4) 




A'p'2 



AB = BA + K- 



The multiplicative commutator A, B satisfy 

BA = e'^AB, A 7^ 0, 
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Let the j-th row and k-th column of B is bjk- The two side of Eq.(jl]) is 
added with the variable k, and obtains J2k^k = c**^^-^ X]j -^j X]/c l^i^P ~ 
^i^AB X,. Thus, A,(e^^^s - 1) = 0. If (f)AB ^ 0, then = 0, that 

means the sum of the eigenvalues of A is 0. Similarly, one can prove that the 
sum of the eigenvalues of S is 0. □ 

In the next part of this paper, we consider the case that A' = A^^, B' = 
B^^. In this case, Eq.(IT]) can also be expressed as B^^A^^BA = e**^/. It can 
be seen that A, B are multiplicative commutator. 

In order to identify personal identification in the protocols, Alice and 
Bob must preshare a secret key k, i, and the multiplicative commutator A, B 
should satisfy: 

B-'A~'BA = e'^^Nkii). (5) 

Alice and Bob preshare secret identification key k, i, where k & K. From the 
value of k, a operator can be obtained and a set I{k) can be constructed, 
and the secret key i G I{k). From fc, we can get a set L{k, i) and a set of 
operators satisfying 

S,{i) = {Af\k)\l G L{k,t)} U {Bl'^{k)\l e L{k,t)}. (6) 

The set of operators Sk{i) should satisfy the condition: for any two elements 
Al^{k),Bll>{k) e Sk{i), it holds that 

[B^{kr'{4^m-'Bi^{k)A^{k) = e^*('-'^)iV,(z). (7) 

Alice and Bob communicates according to k,i and the set Sk{i)- The 
process is as follows 

1. Alice randomly selects li G L{k,i), and performs an operator Af^{k) 
on quantum message 7^, then obtains a state pi. She sends it to I3ob. 

2. Bob randomly selects I2 G L{k, i), and performs an operator Bf^{k) on 
quantum state pt, then obtains a state pt- He sends it to Alice. 

3. According to /i, Alice performs an operator [y4[*'*(A;)]~^ on quantum 
state P2, then obtains a state ^3. She sends it to Bob. 

4. According to I2, Bob performs an operator \Bf\kyr^ on quantum state 
Pa, then obtains a state P4. 

From the condition satisfied by Sk{i), it is deduced that 
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Thus, the quantum state obtained by Bob in the end is Nk{i)~^ . He can 
recovery the quantum message ~^ by performing the inverse transformation 

Through the value of li is unknown by Bob, Bob randomly selects a value 
of I'l G L{k, i), then it can satisfy the relation in Eq. ([7]) (only a little difference 
on total phase). Thus, the inverse transformation of Nk{i) can also be replace 
by 

Ni:'(^) = [4^{kr'[Bll>{kr'4^{k)Bl:\k),\fl[ e L{k,t). 

Because the operators A^i\k)^ B\'^{k) are all trace-preserving quantum op- 
erators and can be implemented physically, the quantum operator A*"^^ is 
physically implementable. Thus, Bob can recovery the quantum message ~^ 
by performing Nj7^{i) on the state pt. 

In order to enhance the security of this protocol, we can select a group 
of similarity transformations {Ti\i G L{k,i)}. The set Sk{i) in the above 
protocol is replaced with another set 

Sk{^ = {T,Af\k)Tr^\l e L{k,i)} U {T,Bl'\k)Tr^\l e L{k,i)}. (9) 

Similarly, N^^i) is replaced with TiNk{i)T~^ ^ but it is still denoted as N^ii) 
for convenient. Then according to Eq.Q, we know 

nBf^{k)]-'[Af^{k)]-'Bf^{k)Af^{k)Tr^ = e^^('-'^)iV,(z). 

From the following relation 

{k)r [A^ m-'Bff {k)A^ {k)T-' 
= [T,Bl^{k)TrY'[T,A^{k)TrY'T,Bl^ (10) 

it is inferred that: any two elements in Sk{i) such as TiAf^ {k)Tj^^, TiB^^ {k)T[' 
satisfy the following relation 

[TM^{k)Tr^]~'mA^{k)Tr^rT,Bl'^^ 

(11) 

2.3. Security 

In QNK protocol, there are 3 times of transmitting quantum ciphers 
through public quantum channel. Denote pi as the i-th quantum cipher with 
respect to the attackers, where i = 1, 2, 3. 
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Definition 1: QNK protocol is information-theoretically secure, if the 
three quantum ciphers pi,p2,P3 satisfy the following condition: for any pos- 
itive polynomial p{.), and all sufficiently big number n, it holds that 



1 



,Vz,j €{1,2,3} 



(12) 



p{n) 



where pi,p2,P3 are all n-qubit ciphers. 

In fact, this definition equals to the following definition. 

Definition 2: QNK protocol is information-theoretically secure, if the 
three quantum ciphers pi, P2, Ps satisfy the following condition: there exists a 
quantum state r, such that for any positive polynomial p{.) and all sufficiently 
big number n, it holds that 



where pi, P2, Ps are all n-qubit ciphers. 

In one hand, if QNK protocol satisfies Definition 2, it can be deduced 
thai D {pi, pj) < D{pi,T)+D{pj,T) < ^,Vi,j G {1, 2, 3}, then the protocol 
satisfies Definition 1; In the other hand, if QNK protocol satisfies Definition 1, 
and let r = pi, we know that D {pi, t) = D {pi, pi) < 6 {1, 2, 3}, then 

the protocol satisfies Definition 2. Thus, the two definitions are equivalent 
to each other. 

Here, pi is the i-th quantum cipher with respect to the attackers, where 
i = 1,2,3. In the QNK protocol, pt is obtained by performing quantum 

transformation A^i\k) on quantum state ~^ . However, with regard to the 
attackers, the random number li and authentication key i, k used by Alice 
cannot be obtained, so 



where Pi,Pk are the probability of selecting the authentication key i,k, and 
Pi-^ is the probability of the local number li being selected by Alice. Similarly, 
the attackers cannot obtain the random number I2 and authentication key 
i, k used by Bob, so 




(13) 



i,k,li 



i,k,h,l2 
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where pi^ is the probabihty of the local number I2 being selected by Bob. 

i,k,li,l2 

Definition 3: QNK protocol is information-theoretically secure, if the 
three operators Ei,fc,«i PiMi A?(^)> ^^,k,h,hPiP^'PhPhBil' {k)A'i';' (k), and 

Z)i,fc,Zi,;2f'*^'fc^''iP'2(A?(^))~^A?(^)A^?(^) satisfy the condition: for any pos- 
itive polynomial p{.), and all sufficiently large number n, it holds that 



E PiPkPi.Pi.Bi^{k)A^{k)\\^<---, 

i,k,h i,k,li,l2 

II E P^P'^P^^Pi^ {Bl^{k)Af^{k) - {Af^{k))-'Bl^{k)A^{k)) \\o<-^y 
II Y.P^PkPiA'l^k) - E PiPkPHPd4^k))-'Bf^{k)Af^{k)\\^ < 

i,k,h i,k,h,l2 

where the notation || * ||^ represents diamond norm. 

It is obvious that a sufficient condition for information-theoretical security 
is as follow: 

ii^-E^^'X^(^)ii^<^'^^'^' 

\\i-A[l^{k)-'\\^<^,yi,k,h, 

p{n) 

||/-Epj4^W)-'5?(fc)lb < -^yy^:Kh. 

P[n) 

For the QNK protocol which uses authentication key, when considering its 
security, besides analyzing the security of quantum message, we also should 
analyze the security of the authentication key. Here we present a definition 
of the security of authentication key in QNK protocol. 

Definition 4: The authentication key in QNK protocol is secure, if for 
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any positive polynomial p{-), and all sufficiently large number n, it holds that 



k2. 



h,h h,l2 

< — V«i,i2, ki, k2- 
p[n) 

3. Two schemes of quantum no-key protocols 

3.1. First scheme 

Unitary transformation is a special kind of trace-preserving quantum op- 
erator. Here we assume the quantum operators used by Alice and Bob 
in QNK protocols are all unitary. Let Nis{i) = I. The sets of operators 
{Ai\l G {1, 2, . . . , T2,yi}} and {Bk\k G {1, 2, . . . , n^}} are natural representa- 
tions of unitary operator used by Alice and Bob. The two set satisfy the 
relation: 

B^:^'Aj-^'Bi,Ai, = e*<^('^''^)/. (14) 

The above formula can also be written as Bi^Ai^ = e'^'^^''^'''^^ Ai^^Bi^. 

Ai, Bk are natural representations of unitary operators. So we can assume 
Ai = El® Ef, Bk = Fk <^ F^, where Ei, Fk are unitary transformations, and 
/ G {1, 2, . . . , Ha}, A; G {1, 2, ... , ub}. Then 

Br^'Aj-^'Bi^A, = {Fi,®FtX\Ei,®El)-\Fi,®Ft;){Ei,®El) 
= {Fi-^'E;^^Fi,Ei,)®{F-^^E-'FM* 
= Viui2®Vli^, (15) 

where V/^^i2 = E^^^ Fi^Ei^ is unitary transformation. According to Eq.( IT^ . 
we have ® Vi^ i^ = e**('i''2)j22n. From the identity /22n = (g) /2n, 
it has V^,,/2 ® Vil i^ = al2^ O 6/2", where ab = e^'^^'i''^), and b = a*. So 
g«0(/i,/2) _ _ |q,|2^ then e**^*^'^''^^ = 1. That means it is impossible to 
produce a global phase in Eq. lfMl) . Thus the Eq. (|T^ is rewritten as follows 

Bi^'A-^'Bi.A, = L (16) 
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Based on this relation, we construct a QNK scheme, which is described 
as follows. 

Firstly, two sets of operators are selected, such as 
S{A) = {Ai\le{l,2,...,nA}}, 

S{B) = {Bu\ke{l,2,...,nB]]. 

By using the two sets, Alice and Bob communicate following this QNK 
protocol. 

1. Alice randomly selects a number li G {1, 2, . . . , n^}, then performs 
quantum operator Ai^ on quantum message 7^, and obtains the state 
Pi- She sends it to Bob. 

2. Bob randomly selects a number I2 G {1, 2, . . . , n^}, then performs 
quantum operator Bi^ on quantum message pi, and obtains the state 
P2- He sends it to Alice. 

3. According to the value of /i, Alice performs quantum operator A'^^ (or 
A^i ) on quantum message pt, and obtains the state pf. She sends it to 
Bob. 

4. According to the value of /2, Bob performs quantum operator B^^ (or 
B\^) on quantum message pt, and obtains the state pt. 

According to the relation (Eq. (fT6|) ) of the two sets S{A)^ S{B), we know 
that 

pt = B[^'Ai-^'Bi,A,t = t. 

Thus, the quantum state obtained by Bob's performing quantum transfor- 
mation B^^ is just the quantum message sent by Alice. 

3.2. Second scheme 

Denote the operation of two operators A, B: {A, B) = B^^A^^BA. 
Suppose there exists two groups of operators S{A) = {Ai\i = 1, • ■ ■ , n^} 
and S{B) = {Bi\i = 1, ■ • • which satisfy the following condition 

(A, B,) = N,\ft e {!,■■■ , nA},j e {1, ■ ■ ■ , n^}, (17) 
where N is an operator that is independent of 
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Proposition 1: Suppose two sets of operators S{A),S{B) satisfy the 
condition Eq.f llTp . then the following relations hold: Vi, j 



{Ar\B,Br^) = I, (18) 

{AJ\B,B7^) = I, (19) 

{B,,A,Ai') = I, (20) 

{B,,A,Ar') = I. (21) 

Proof: See the appendix. □ 
Proposition 2: Suppose two sets of operators S{A),S{B) satisfy the 
condition Eq. (fT71) . then the following relations hold: Vi, j, k, I 

{AA„BkBi) = iAlBf). (22) 

Proof: See the appendix. □ 



According to Proposition 2, we know the relation {Aij^A^-^, Bi^B^.^) = 
{Al_^,Bl^). Based on this relation, a QNK scheme is constructed as follows. 

Suppose the set of similarity transformations {Ti\i G /} is selected. 
Firstly we construct a set of operators Sk{i) as follows: 

Sk,\\k,{i) = {T,AiAk,Tr'\l e {!,■■■ ,nA}} 

U{TiBiBk,T-'\l e {!,■■■ ,nB}}. (23) 

In the set Sk{i), any two elements A\^^{ki\\k2) = TiAi^Ai^^Tf^ and Bl^J{ki\\k2) = 
TiBi^Bk^Tf^ satisfy the following relation 

{Al]^ik^\\k2),B^l>{k^\\k2)) = {T,Ai,AkJ-\TiBi,Bk,T-^) 

= Ti{Ai^Akj^,Bi^Bk^)T~^ 
= T,iAl,Bl)Tr\ (24) 

Denote Nk,\\k, = {Al,Bl), Nk,\\k,{^ = TM,\\k,T-\ then 

(A«(fci||fc2),i?;f (A;i||A;2)) = iVfc,||fe(z), V/1,/2. (25) 

Alice and Bob communicate according to A;i||A;2, i {ki G {1, ■ ■ ■ , n^}, A;2 G 
{1, ■ ■ ■ yUs}, i & I) and the set of operators >S'fcj||fc2(^)- The process is as 
follows. 
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1. Alice randomly selects a number li e {!,••• , tia}, and performs quan- 
tum transformation ^['^(fci||A;2) on quantum message then obtains 
Pi. She sends it Bob. 

2. Bob randomly selects a number I2 G {1, ■ ■ ■ jTIb}, and performs quan- 
tum transformation ^^^'''(A;!! |A;2) on quantum state pt, then obtains pt- 
He sends it to Alice. 

3. According to , Alice performs quantum transformation [A\^^ (ki\\ ^2)] 
on quantum state p^, and obtains pf. She sends it to Bob. 

4. According to I2, Bob performs quantum transformation [i?j^*''(A;i||/c2)]~^ 
on quantum state ps, and obtains pt. 

From the condition satisfied by Ski\\k2{'i), it can be deduced that 

pt = A^fc,||.,(i)^ = T,{Al,Bl)T-'^. (26) 

Bob performs the inverse transformation of Nk-^^\\k^{i) , which is [iVfe^n^jlO]""^ — 
Ti{Bl^, Al_^)T~^, then the quantum message is recovered. 

Propositions: {Aj^Aj^Aj^, Bi^Bi^Bi^) = {Aj^Aj^Aj^, Bi^Bi^Bi^),yii,i2,i3, 

Vii,i2,i3- 

Proof: Sec the appendix. □ 
According to Proposition 3, we know the relation {Ai-^Ak^Ai^^, Bi^B^^Bk^) — 
{Ak^AkiAi;^, Bk^Bk^Bk^). Suppose the set of similarity transformations {Tj|i e 
/} is selected. We construct the set of operators Sk{i) as follows: 

^kiWkiWkaWkA'i) = {TiAiAk^Ak^T'^ll = 1,- ■ ■ ,nA} 

U{TiBiBk,Bk,T-'\l = !,■■■, ub}. (27) 

When the set of operators Skj^\\k2\\k3\\k4,{'i) is used in the QNK communication, 
/ is a random number selected locally, and ki, k2, k^, k4,i are authentication 
keys preshared by Ahce and Bob. If Ahce selects a local random number 
Zi, then she should perform quantum transformation T^Ai^Ak^Ak^ Tr: if Bob 
selects a local random number ^2, then he should perform quantum trans- 
formation TiBi.^Bk.^Bk^Tf^. The detailed process of the three interactive 
communication is the same as the last scheme. After the fourth step. Bob 
obtains a quantum state 

pi = Ti{Ak2Akj^Ak2, Bk^Bk^Bk^)Tr^~^ . (28) 

Then Bob performs quantum transformation Ti^B^^B^^Bk^, Ak^Akj^Ak^)T~^ 
and obtains the quantum message ~^ sent by Alice. 
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In general, we have the following relation 

(AiAkiAki ■ ■ ■ Ak„, Bi^Bk'^Bk;^ ■ ■ ■ Bk'J = {Ak„Ak^Ak^ ■ ■ ■ Ak„, Bk'^Bk^Bk'^ ■ ■ ■ Bk'J. 

(29) 

According to this relation, a new QNK scheme can be constructed similarly. 
In the new scheme, more operators can be used by Alice and Bob. 

3.3. Construction of the sets S{A) and S{B) 

Suppose there exists two groups of operators such as S{A) = {Ai\i = 
1, ■ ■ ■ , ua} and S{B) = {Bi\i = 1, ■ ■ ■ , ub}, and they satisfy the relation ex- 
pressed in Eq.([I7D, then A-^BjAi = BjN^j. Thus Ar^BjAi^ = A-^BjAi^. 
That is 

iA,A7')B, = B,{A,A7'), (30) 

or written as (Aj^Ar^ 5^) = / or [Ai^A^^^, Bj] = 0. (Denote [A, B] = AB - 
BA) 

According to Eq. (|T7|) and the similar deduction, it can be inferred that 

Vz,j, /c, 

[AiAj\Bk] = 0, (31) 

[AAJ\B,']=0, (32) 

[B,BT\Ak] = 0, (33) 

[B,Br\A,'] = 0, (34) 

From [y4jv4~\ Bk] = 0, Vz, j, k, it can be deduced that 

[AA-\BkBf'] = [AAj\Bk]B^' + Bk[AA-\Bf'] = + = 0. (35) 

That means (AiAj^BkB-^) = I,\/Ai,Aj e S{A),Bk,Bi G S{B). 

Thus, we can extend the two sets of operators S{A),S{B) to two new 
sets of operators S{A), S{B) as follows: 

S{A) = {A,||, = AA-'\A,A, e S{A)}, (36) 
S{B) = = B,Br'\Bi,B, G S{B)}, (37) 

According to Eq. fl35l) , if we select one element from each of the two new sets 
S{A),S{B), such as Ai\\j, Bk\\i (where i,j G {1, ■ ■ ■ ,71^}, k, I e {!,■■■ ,^5}), 
then the two elements satisfy the relation {Ai\\j, Bk\\i) = I. Thus, the new 
sets extended from S{A), S{B) can also be used in QNK protocol. 
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When ua = n-B = 2, the extended sets of operators are S{A) = {A1A2 ^, 
AsA^^AiA^^ = I.AiA^^ = 1} and S{B) = {BiB^\ B2B^\ B^B^^ = 
J, BiB^^ = I}. Because the identity operator / in the two sets is meaning- 
less, the number of the operators in the two extended sets does not increase 
through the above method (The number of the operators in each set remains 
2). Thus the extension is meaningless. However, the extension is meaningful 
when ua, ub > 3. 

4. Discussions and Conclusions 

We study the theory of quantum no-key protocols. Firstly, a framework 
of quantum no-key protocols is presented. The framework is expressed in 
two forms: trace-preserving quantum operators and natural presentations. 
Secondly, we defined the information-theoretical security of quantum no- 
key protocol, and the security of authentication keys. Finally, two kinds of 
quantum no-key protocols arc presented. In the first scheme, the quantum 
operators used by Alice and Bob are all unitary. In the second scheme, 
Alice and Bob use trace-preserving quantum operators, and the two sets of 
operators used by Alice and Bob are constructed based on two multiplicative 
commutative sets. 

In the paper, there exists the following questions. 

1. k,i are secret identification key. How to use them to identify the per- 
sonal identification of Alice, Bob, or attackers. How to identify in each 
of the three transformations? 

2. How to construct operator A'^^ and a set I{k) from a given number fc? 

3. How to construct a set L{k,i) and a set of operators Sk{i) from the 
given k and i e I{k)l 

4. In the quantum no- key protocols, the numbers li,l2 G L{k,i) are se- 
lected randomly. Whether the random selection of li,l2 can prevent 
from the leakage of identification keys k & K, and i e I{k) during the 
communication? 
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Appendix 

Proposition 1: Suppose two sets of operators S{A),S{B) satisfy the 
condition Eq.( !T7|) . then the following relations hold: Vi,j 



{A;\B,Br^) = I, (38) 

{AJ\B,B7^) = I, (39) 

iB„A,Ar') = I, (40) 

{B„A,Ar') = I. (41) 



Proof: According to the condition Eq. f[T7|) . Vi 7^ j 

{A,B,) = N, 
iA,B,) = N, 
{A„B,) = N, 
{Aj,B^) = N. 

From the identity (Aj, Bi) = N = (Aj, Bj), it can be deduced B^^Aj'^BiAi = 
B-^Ar^BjAi, then 

B.'Ar'B, = B.'Ar'B,. 

Thus, it can be known that {BjB;^)Ar^ = Ar\BjB;^), that is {Ar\BjB;^) = 
I. 

The other three relations can be obtained in the same way. □ 
Proposition 2: Suppose two sets of operators S{A),S{B) satisfy the 
condition Eq. (fT7I) . then the following relations hold: Vi, j, k, I 

{AA„BkBi) = {AlBf). (42) 

Proof: In the deduction of this proof, the four identities such as BiAi = 
AiBiN (that is (A, A) = A), A'^BkAi = BkN (that is (Ai,Sfc) = A), 
B^^Aj^Bk = Bf^Aj^Bi, and BiN = Aj^BiAj (that is iAj,Bi) = A) are 
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used in turn. The deduction is as follows. Vi, j, k, I, 

{AA^,BkBi) = {B^'B,'){Aj'Ar')BkBiAA^ 
= iB['B,')Aj'A;'B,ABiNA^ 
= Bf'B.'Aj^BkNBiNAj 
= B['B['Aj^BiNBiNAj 
= {Bf'fAj'Aj'BiAAj'B^AA, 
= [B^'nAj^fB^A] 
= (AlBf). 

□ 

Propositions: {Aj^Aj^Aj.^, Bi^Bi^Bi.^) = {Aj^Aj^Aj^, Bi.^Bi^Bi^),yii,i2,i3, 
Vii,i2,i3- 

Proof: It can be inferred from the formula A~^BkAi = Aj^BkAj that 

A ^Bk^Bk^Bk^Ai = A- ^Bk-^AiA- ^B^^AiA- ^B^^Ai 

= Aj^Bk, AjAj'Bk, AjAj'Bk, Aj 

= Aj^Bk-^Bk^Bk^Aj. 

Similarly, it can be inferred 

5r'<A-'<i?. = (43) 

Thus, the following result holds 

{Aj-^Aj^Aj^, Bi^Bi^Bi.^^) = B^,^ B^,^ B^_^ A-^ A-^ AA Bi-^Bi^Bi.^Aj^Aj^Aj^ 

= -^ia ^^12 "^h BiiBi^ Bi^ Aj^ Aj^ Aj^ 

= -^13 ^ -^«2 ^ ^i2 ^ ^i3^ ^i2^ Aj2^ Bi2 Big Aj^ Aj^ Ajg 

= -^13 ^ -^12 ^ ^i2 ^ "^ja Aj2 Big Ajg Aj^ Ajg 

= Big'B^^ B-,^ ^ A A A A A A Bi^ Bi^Bi^ Aj^ Aj^ Aj^ 

~ i^ja -^32 Ajs ' Big Bi^ Big ) . 

□ 
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